{"action":"Upgrade guzzlehttp/psr7 to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"},{"fixed":"2.4.5","introduced":"2.0.0"}],"component":"guzzlehttp/psr7","cve_ids":["CVE-2023-29197"],"ecosystem":"Packagist","epss":0.01216,"exploited":false,"fixed_versions":["1.9.1","2.4.5"],"ghsa_id":"GHSA-wxmh-65f7-jcvw","id":"tcs_01M5KFAG1YPMKG3CCY2DQ782BM","modified_at":"2026-02-04T04:19:33.828903Z","published_at":"2023-04-19T18:25:53Z","references":["https://osv.dev/vulnerability/GHSA-wxmh-65f7-jcvw","https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96","https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw","https://nvd.nist.gov/vuln/detail/CVE-2023-29197","https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-24775","https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2023-29197.yaml","https://github.com/guzzle/psr7","https://lists.debian.org/debian-lts-announce/2023/12/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O35UN4IK6VS2LXSRWUDFWY7NI73RKY2U","https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-wxmh-65f7-jcvw","url":"https://osv.dev/vulnerability/GHSA-wxmh-65f7-jcvw"}],"summary":"Improper header name validation in guzzlehttp/psr7"}